CVE-2021-35474: Dynamic stack buffer overflow in cachekey plugin
Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-35474?
CVE-2021-35474 is a stack-based buffer overflow vulnerability in the cachekey plugin of Apache Traffic Server.
How does CVE-2021-35474 affect Apache Traffic Server?
CVE-2021-35474 affects Apache Traffic Server versions 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, and 9.0.0 to 9.0.1.
What is the severity rating of CVE-2021-35474?
The severity rating of CVE-2021-35474 is critical with a CVSS score of 9.8.
How can I fix CVE-2021-35474 on Debian?
To fix CVE-2021-35474 on Debian, update the 'trafficserver' package to version 8.0.2+ds-1+deb10u6 or higher, 8.1.7-0+deb10u2 or higher, 8.1.7+ds-1~deb11u1 or higher, 9.2.0+ds-2+deb12u1 or higher, or 9.2.2+ds-1 or higher.
Where can I find more information about CVE-2021-35474?
You can find more information about CVE-2021-35474 at the following references: [1] [2] [3].